cosign

Documentation

Overview

Package cosign provides functionality for signing and verifying container images using cosign (sigstore's container signing tool).

Index

• type Signer
  • func NewSigner(opts *config.KanikoOptions) *Signer
  • func (s *Signer) GenerateKeyPair(ctx context.Context, outputDir string) error
  • func (s *Signer) GetPublicKey(_ context.Context) (string, error)
  • func (s *Signer) IsImageSigned(ctx context.Context, imageRef string) (bool, error)
  • func (s *Signer) SignImage(ctx context.Context, imageRef string) error
  • func (s *Signer) SignIndex(ctx context.Context, indexRef string) error
  • func (s *Signer) VerifyImage(ctx context.Context, imageRef string) error

Types

type Signer

type Signer struct {
	// contains filtered or unexported fields
}

Signer provides functionality for signing container images using cosign

func NewSigner

func NewSigner(opts *config.KanikoOptions) *Signer

NewSigner creates a new cosign signer instance

func (*Signer) GenerateKeyPair

func (s *Signer) GenerateKeyPair(ctx context.Context, outputDir string) error

GenerateKeyPair generates a new cosign key pair

func (*Signer) GetPublicKey

func (s *Signer) GetPublicKey(_ context.Context) (string, error)

GetPublicKey returns the public key from a key file

func (*Signer) IsImageSigned

func (s *Signer) IsImageSigned(ctx context.Context, imageRef string) (bool, error)

IsImageSigned checks if an image is signed using cosign

func (*Signer) SignImage

func (s *Signer) SignImage(ctx context.Context, imageRef string) error

SignImage signs a container image using cosign

func (*Signer) SignIndex

func (s *Signer) SignIndex(ctx context.Context, indexRef string) error

SignIndex signs a multi-platform image index using cosign

func (*Signer) VerifyImage

func (s *Signer) VerifyImage(ctx context.Context, imageRef string) error

VerifyImage verifies a signed container image using cosign